Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Tobias Brunner
73883705bd
force unique connections for mediation connections
2009-02-18 19:48:11 +00:00
Martin Willi
b81d8cd3cc
changed [4856] to dynamically choose traffic selector family
2009-02-11 13:09:52 +00:00
Andreas Steffen
c59825fbfc
support of dynamic/128 and %any6
2009-02-05 22:13:48 +00:00
Andreas Steffen
c117f24e61
renamed proxy to proxy_mode in stroke_msg.h
2008-11-11 07:28:52 +00:00
Andreas Steffen
d487b4b727
preliminary support of Mobile IPv6
2008-11-11 06:37:37 +00:00
Martin Willi
a1db79b31a
fixed some compiler warnings
2008-10-27 11:13:33 +00:00
Martin Willi
9c0aa46b64
use dpd_action also for remotely closed tunnels
2008-10-02 13:47:19 +00:00
Andreas Steffen
b33c11b6c7
stroke parses and lists AC groups
2008-09-17 02:17:01 +00:00
Andreas Steffen
919019b3cd
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
2008-08-26 05:15:34 +00:00
Martin Willi
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Andreas Steffen
858a9fd584
update_peerid() does not accept %any as a certificate's subjectAltName
2008-07-09 22:13:39 +00:00
Martin Willi
5a22a02156
DNS resolving of ike_cfg hosts dynamically on demand
2008-06-06 15:05:54 +00:00
Andreas Steffen
f85d02a419
fixed typos
2008-05-11 20:36:14 +00:00
Tobias Brunner
d4aad55434
IPComp for IKEv2
2008-05-08 16:19:11 +00:00
Martin Willi
3444390241
supporting multiple comma seperated subnets in left/rightsubnet definition
...
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
2008-04-25 12:41:37 +00:00
Tobias Brunner
6439267a8c
support for hash and URL encoded certificate payloads in charon
2008-04-18 11:24:45 +00:00
Martin Willi
e5617e40d1
adding rightsourceip=%poolname properly to peer config
2008-04-17 08:55:32 +00:00
Martin Willi
140ed97c0c
disable DPD if dpddelay is set but dpdaction=none
2008-04-16 05:50:56 +00:00
Martin Willi
0644ebd3de
implemented IKE_SA uniqueness using ipsec.conf uniqueids paramater
...
additionally supports a "keep" value to keep the old IKE_SA
2008-04-14 13:23:24 +00:00
Martin Willi
a593db5d35
ike_sa_manager enumerable, not iterable
2008-04-14 11:37:46 +00:00
Martin Willi
348af092ac
added close_action as a seperate config option to dpd_action
2008-04-14 08:17:18 +00:00
Martin Willi
45819d7d49
fixed rightsourceip=%config scenarios
2008-04-14 07:18:16 +00:00
Martin Willi
96926b006d
using dpd actions to enforce connection state
...
dpd actions a per child-, not peer ike-sa
2008-04-11 08:14:48 +00:00
Martin Willi
cdcfe777f4
implementation of an CFG attribute framework, currently supporting virtual IPs
...
updated ipsec.conf sourceip parameter to support
CIDR notatation to serve from a pool
%poolname to query a separate (database?) pool
2008-04-09 12:54:47 +00:00
Tobias Brunner
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
2008-03-26 18:40:19 +00:00
Martin Willi
391abda082
fixed compile error if --enable-p2p is set
2008-03-26 14:45:24 +00:00
Martin Willi
0b14fdb92b
splitted stroke plugin to several files:
...
socket: reads messages from socket, dispatching
config: process add/del conn, serves configs through backend_t
control: controlling of the daemon (up/down/route/...(
cred: credential loading, serves creds through credential_set_t
ca: ca sections from ipsec.conf, serves cdp's through credential_set_t
list: log status information to stroke console (status/statusall/list*)
shared_key: shared key implementation for keys read from ipsec.secrets
plugin: registers stroke plugin and starts socket w/ thread
2008-03-26 10:10:40 +00:00
Martin Willi